CF
Product
Cisco Firepower Threat Defense Software
On CISA KEVExploited in the wildRansomware-linked
63
CVEs
4
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 2High 27Medium 34Low 0
Watch
Add Cisco Firepower Threat Defense Software to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-20269 RansomwareIn wildKEV | 9.1 | Sep 6 | Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2024-20353 In wildKEV | 8.6 | Apr 24 | Cisco ASA and FTD Denial of Service Vulnerability Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2024-20359 In wildKEV | 6.0 | Apr 24 | Cisco ASA and FTD Privilege Escalation Vulnerability Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2024-20481 In wildKEV | 5.8 | Oct 23 | Cisco ASA and FTD Denial-of-Service Vulnerability Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2025-20363 | 9.0 | Sep 25 | A vulnerability in the web services of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Secure Firewall Threat Defense (FTD) Software, Cisco IOS Software,… Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2025-20263 | 8.6 | Aug 14 | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Buffer Overflow Denial of Service Vulnerability Affected: 6.2.3.14; 6.4.0.1; 6.2.3.7; 6.2.3; 6.4.0.2; 6.2.3.9; +34 more |
| CVE-2025-20253 | 8.6 | Aug 14 | Cisco IOS, IOS XE, Secure Firewall Adaptive Security Appliance, and Secure Firewall Threat Defense Software IKEv2 Denial of Service Vulnerability Affected: 6.2.3.14; 6.4.0.1; 6.2.3.7; 6.2.3; 6.4.0.2; 6.2.3.9; +34 more |
| CVE-2025-20243 | 8.6 | Aug 14 | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability Affected: 6.2.3.14; 6.4.0.1; 6.2.3.7; 6.2.3; 6.4.0.2; 6.2.3.9; +34 more |
| CVE-2025-20239 | 8.6 | Aug 14 | A vulnerability in the Internet Key Exchange Version 2 (IKEv2) feature of Cisco IOS Software, IOS XE Software, Secure Firewall Adaptive Security Appliance (ASA) Software, and… Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2025-20222 | 8.6 | Aug 14 | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Buffer Vulnerability Affected: 6.2.3; 6.2.3.9; 6.2.3.1; 6.2.3.2; 6.2.3.10; 6.4.0; +34 more |
| CVE-2025-20217 | 8.6 | Aug 14 | Cisco Firepower Threat Defense Intrusion Detection Denial of Service Vulnerability Affected: 7.1.0; 7.1.0.1; 7.2.0; 7.1.0.2; 7.2.0.1; 7.2.1; +23 more |
| CVE-2025-20136 | 8.6 | Aug 14 | Cisco Adaptive Security Appliance and Firepower Threat Defense Software Network Address Translation DNS Inspection Denial of Service Vulnerability Affected: 6.2.3.14; 6.4.0.1; 6.2.3.7; 6.2.3; 6.4.0.2; 6.2.3.9; +34 more |
| CVE-2025-20133 | 8.6 | Aug 14 | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Authentication Targeted Denial of Service Vulnerability Affected: 6.2.3.14; 6.4.0.1; 6.2.3.7; 6.4.0.2; 6.2.3.9; 6.2.3.1; +34 more |
| CVE-2025-20134 | 8.6 | Aug 14 | Cisco Adaptive Security Appliance and Firepower Threat Defense Software SSL/TLS Certificate Denial of Service Vulnerability Affected: 6.6.5.2; 6.4.0.15; 6.6.7; 6.4.0.16; 6.6.7.1; 6.4.0.17; +2 more |
| CVE-2025-20182 | 8.6 | May 7 | Cisco Adaptive Security Appliance Software, Firepower Threat Defense Software and IOS XE Software IKEv2 Denial of Service Vulnerability Affected: 6.2.3.14; 6.4.0.1; 6.2.3.7; 6.2.3; 6.4.0.2; 6.2.3.9; +34 more |
| CVE-2024-20495 | 8.6 | Oct 23 | A vulnerability in the Remote Access VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 6.2.3.16; 6.2.3.17; 6.2.3.18; 6.6.0; 6.6.0.1; 6.6.1; +34 more |
| CVE-2024-20494 | 8.6 | Oct 23 | A vulnerability in the TLS cryptography functionality of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 7.3.0; 7.3.1; 7.3.1.1; 7.3.1.2; 7.4.0; 7.4.1; +2 more |
| CVE-2024-20426 | 8.6 | Oct 23 | A vulnerability in the Internet Key Exchange version 2 (IKEv2) protocol for VPN termination of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense… Affected: 7.2.0; 7.2.0.1; 7.2.1; 7.2.2; 7.2.3; 7.2.4; +15 more |
| CVE-2024-20402 | 8.6 | Oct 23 | A vulnerability in the SSL VPN feature for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2024-20342 | 8.6 | Oct 23 | Cisco Firepower Threat Defense Software Rate Filter Bypass Vulnerability Affected: 7.0.0; 7.0.0.1; 7.0.1; 7.1.0; 7.0.1.1; 7.1.0.1; +26 more |
| CVE-2019-1669 | 8.6 | Jan 24 | Cisco Firepower Threat Defense Software Packet Inspection and Enforcement Bypass Vulnerability Affected: All versions, or not specified |
| CVE-2025-20251 | 8.5 | Aug 14 | Cisco Secure Firewall Adaptive Security Appliance and Cisco Secure Firewall Threat Defense Software Authenticated Arbitrary File Deletion Affected: 6.2.3.14; 6.4.0.1; 6.2.3.7; 6.2.3; 6.4.0.2; 6.2.3.9; +34 more |
| CVE-2024-20412 | 8.4 | Oct 23 | A vulnerability in Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 1000, 2100, 3100, and 4200 Series could allow an unauthenticated, local attacker to access an… Affected: 7.1.0; 7.1.0.1; 7.1.0.2; 7.1.0.3; 7.2.0; 7.2.0.1; +17 more |
| CVE-2025-20244 | 7.7 | Aug 14 | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access VPN Web Server Denial of Service Vulnerability Affected: 6.2.3.14; 6.4.0.1; 6.2.3.7; 6.2.3; 6.4.0.2; 6.2.3.9; +34 more |
| CVE-2025-20127 | 7.7 | Aug 14 | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software for Firepower 3100 and 4200 Series TLS Cipher Denial of Service Vulnerability Affected: 7.4.0; 7.4.1; 7.4.1.1; 7.4.2; 7.6.0; 7.4.2.1 |
| CVE-2024-20408 | 7.7 | Oct 23 | A vulnerability in the Dynamic Access Policies (DAP) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2024-20268 | 7.7 | Oct 23 | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SNMP Denial of Service Vulnerability Affected: 6.6.0; 6.6.0.1; 6.6.1; 6.7.0; 6.6.3; 6.7.0.1; +34 more |
| CVE-2022-20685 | 7.5 | Nov 15 | Multiple Cisco Products Snort Modbus Denial of Service Vulnerability Affected: 6.2.3.14; 6.4.0.1; 6.2.3.7; 6.2.3; 6.4.0.2; 6.2.3.9; +34 more |
| CVE-2024-20351 | 7.5 | Oct 23 | Cisco Firepower Threat Defense Software Snort Firewall Denial of Service Vulnerability Affected: 6.2.3.14; 6.4.0.1; 6.2.3.7; 6.2.3; 6.4.0.2; 6.2.3.9; +34 more |
| CVE-2024-20339 | 7.5 | Oct 23 | Cisco Firepower Threat Defense Software for Firepower 2100 Series TLS Denial of Service Vulnerability Affected: 6.2.3; 6.2.3.9; 6.2.3.1; 6.2.3.2; 6.2.3.10; 6.4.0; +34 more |
| CVE-2024-20330 | 7.5 | Oct 23 | Cisco Firepower Threat Defense Software for Cisco Firepower 2100 Series TCP UDP Snort 2 and Snort 2 Denial of Service Vulnerability Affected: 7.0.0; 7.0.0.1; 7.0.1; 7.1.0; 7.0.1.1; 7.1.0.1; +31 more |
| CVE-2021-34752 | 6.7 | Nov 15 | Cisco Firepower Threat Defense Command Injection Vulnerabilities Affected: 6.2.3; 6.6.0.1; 6.4.0.6 |
| CVE-2024-20485 | 6.7 | Oct 23 | A vulnerability in the VPN web server of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local… Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2024-20382 | 6.1 | Oct 23 | A vulnerability in the VPN web client services feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2024-20341 | 6.1 | Oct 23 | Cisco Adaptive Security Appliance WebVPN Cross-Site Scripting Vulnerability Affected: 6.2.3.14; 6.4.0.1; 6.2.3.7; 6.2.3; 6.4.0.2; 6.2.3.9; +34 more |
| CVE-2022-20713 | 6.1 | Aug 10 | A vulnerability in the VPN web client services component of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2025-20220 | 6.0 | Aug 14 | A vulnerability in the CLI of Cisco Secure Firewall Management Center (FMC) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, local… Affected: 7.2.6; 7.2.7; 7.2.8; 7.2.8.1; 7.2.9; 7.4.1; +4 more |
| CVE-2025-20237 | 6.0 | Aug 14 | A vulnerability in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, local… Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2025-20238 | 6.0 | Aug 14 | A vulnerability in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, local… Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2024-20370 | 6.0 | Oct 23 | A vulnerability in the Cisco FXOS CLI feature on specific hardware platforms for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software… Affected: 7.1.0; 7.1.0.1; 7.1.0.2; 7.1.0.3; 7.2.0; 7.2.0.1; +19 more |
| CVE-2024-20331 | 5.9 | Oct 23 | Cisco Adaptive Security Appliance and Firepower Threat Defense Software VPN Authentication DoS Vulnerability Affected: 6.2.3.14; 6.4.0.1; 6.2.3.7; 6.2.3; 6.4.0.2; 6.2.3.9; +34 more |
| CVE-2025-20268 | 5.8 | Aug 14 | Cisco Secure Firewall Threat Defense Software Geolocation Remote Access VPN Bypass Vulnerability Affected: 7.7.0 |
| CVE-2025-20254 | 5.8 | Aug 14 | A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD)… Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2025-20252 | 5.8 | Aug 14 | A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD)… Affected: 6.2.3.16; 6.2.3.17; 6.2.3.18; 6.6.0; 6.6.0.1; 6.6.1; +34 more |
| CVE-2025-20225 | 5.8 | Aug 14 | A vulnerability in the Internet Key Exchange Version 2 (IKEv2) feature of Cisco IOS Software, IOS XE Software, Secure Firewall Adaptive Security Appliance (ASA) Software, and… Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2025-20224 | 5.8 | Aug 14 | A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD)… Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2021-1494 | 5.8 | Nov 15 | Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured file policy for… Affected: All versions, or not specified |
| CVE-2024-20431 | 5.8 | Oct 23 | A vulnerability in the geolocation access control feature of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass an access… Affected: 7.0.0; 7.0.0.1; 7.0.1; 7.0.1.1; 7.0.2; 7.0.2.1; +26 more |
| CVE-2024-20407 | 5.8 | Oct 23 | A vulnerability in the interaction between the TCP Intercept feature and the Snort 3 detection engine on Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2024-20384 | 5.8 | Oct 23 | A vulnerability in the Network Service Group (NSG) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 7.0.0; 7.0.0.1; 7.0.1; 7.0.1.1; 7.0.2; 7.0.2.1; +32 more |